WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
liquid-chatgpt
Published
2025-11-24
Title
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read
Slug
liquid-speech-balloon
Published
2023-04-19
Title
Liquid Speech Balloon < 1.2 - Settings Update via CSRF
Slug
lis-video-gallery
Published
2024-11-15
Title
Lis Video Gallery <= 0.2.1 - Unauthenticated PHP Object Injection
Slug
lisfinity-core
Published
2025-10-08
Title
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme < 1.5.0 - Authenticated (Subscriber+) Privilege Escalation
Slug
lisfinity-core
Published
2025-10-14
Title
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme < 1.5.0 - Unauthenticated Privilege Escalation to Editor
Slug
lisfinity-core
Published
2026-03-05
Title
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.5.0 - Unauthenticated SQL Injection
Slug
lisl-last-image-slider
Published
2014-08-01
Title
LISL Last Image Slider 1.0 - Shell Upload
Slug
list-all-posts-by-authors-nested-categories-and-titles
Published
2023-11-29
Title
List all posts by Authors, nested Categories and Title < 2.8.3 - CSRF
Slug
list-attachments-shortcode
Published
2025-12-05
Title
List Attachments Shortcode <= 0.4.1a - Authenticated (Author+) Stored Cross-Site Scripting via list-attachments Shortcode
Slug
list-categories
Published
2024-05-29
Title
List categories < 0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
list-category-posts
Published
2024-01-09
Title
List category posts < 0.89.4 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
list-category-posts
Published
2024-03-29
Title
List category posts < 0.89.7 - Contributor+ Stored XSS
Slug
list-category-posts
Published
2024-12-27
Title
List category posts < 0.90.3 - Author+ Stored XSS
Slug
list-category-posts
Published
2025-05-07
Title
List category posts < 0.92.0 - Contributor+ Local File Inclusion
Slug
list-category-posts
Published
2025-10-31
Title
List category posts < 0.93.0 - Authenticated (Contributor+) Information Exposure
Slug
list-category-posts
Published
2025-12-10
Title
List Category Posts < 0.92.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode
Slug
list-category-posts
Published
2026-04-08
Title
List category posts < 0.95.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode
Slug
list-category-posts
Published
2026-02-26
Title
List category posts < 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
list-category-posts
Published
2026-07-15
Title
List category posts < 0.96.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute
Slug
list-child-pages-shortcode
Published
2025-09-22
Title
List Child Pages Shortcode < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-children
Published
2025-04-30
Title
List Children < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
list-custom-taxonomy-widget
Published
2024-04-22
Title
List Custom Taxonomy Widget < 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
list-last-changes
Published
2025-04-22
Title
List Last Changes < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-mixcloud
Published
2025-03-11
Title
List Mixcloud <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-one-category-of-posts
Published
2024-12-12
Title
Category of Posts <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting